This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json) Hash identifier: 9e8LY0PC2kyVcHRWb0xv8Fwas8mbR5AUhunn9lXmTJ0= Subject key identifier: A1:3F:39:09:52:A7:05:FC:A7:1E:D3:20:D0:80:9F:E1:50:73:BF:BE Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e Certificate serial: 019B631F392432111B1BC8D2BAF942880BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft Manifest number: 1196 Signing time: Sun 28 Dec 2025 04:02:29 +0000 Manifest this update: Sun 28 Dec 2025 04:02:29 +0000 Manifest next update: Mon 29 Dec 2025 04:02:29 +0000 Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: RPlqC3jXqcDDPXIgasiRGfYWZLk+exVhwGTfsIGFQNU=) 2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:39:24:32:11:1b:1b:c8:d2:ba:f9:42:88:0b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e Validity Not Before: Dec 28 04:02:29 2025 GMT Not After : Dec 29 04:02:29 2025 GMT Subject: CN=a13f390952a705fca71ed320d0809fe15073bfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:a6:fd:8e:ec:05:ec:b7:25:44:8c:cf:a9: 59:4c:84:95:97:05:14:f5:27:8a:fc:70:2f:ac:4d: 9d:88:b9:4b:42:b8:05:03:ca:fb:08:68:dc:02:5d: d1:9e:25:96:e9:3a:c7:94:7c:b2:02:2a:dd:c7:57: cc:58:db:f9:a6:84:cc:86:0a:41:02:46:86:2e:75: 26:32:bd:3d:43:bc:ae:2d:a2:fe:cd:61:65:48:c4: 66:0c:a0:e5:06:f4:b2:73:9e:9a:40:59:e8:4a:dd: 68:e6:fe:cb:4c:e7:0b:73:89:65:51:7a:3f:b3:6c: 0a:96:43:a2:a8:07:5b:a4:f5:16:44:85:03:2a:b4: 52:04:10:91:38:dc:0d:89:0f:83:1e:bb:25:81:14: 34:df:1d:33:25:8a:e5:38:2f:00:99:ea:de:43:22: b6:6e:09:a2:1c:a3:44:63:e9:ac:a3:05:02:81:94: c4:66:84:b1:e7:06:07:5c:2f:d2:6a:e9:ff:04:49: c1:42:7a:d8:51:48:aa:57:af:48:93:03:2d:7d:0a: e7:91:1a:cf:95:65:21:e7:44:2f:06:65:80:35:30: 1e:70:a5:46:44:0c:18:61:6c:e2:72:7d:34:81:9d: 68:ee:ad:ba:dc:a9:45:5e:b9:8a:6e:97:26:4a:ab: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:39:09:52:A7:05:FC:A7:1E:D3:20:D0:80:9F:E1:50:73:BF:BE X509v3 Authority Key Identifier: keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:57:c6:b4:fb:91:7e:4a:3f:a4:00:c0:06:0c:11:85:ee:17: 1e:a6:0c:cc:47:c3:52:1f:23:00:fc:ef:e5:a3:3b:33:4b:59: e5:51:0c:8f:a0:52:83:da:48:00:be:53:ac:85:d6:34:f7:64: 38:9a:f0:3b:4b:e9:96:fb:bf:a4:1b:c9:ef:92:33:05:c7:d0: 91:5c:63:c8:31:c7:e5:16:3d:b9:f3:d1:ba:0c:86:5c:54:a2: 79:bc:cf:c2:94:78:c8:99:05:ce:65:2a:57:ff:a0:f5:5a:55: d2:e4:6c:06:a0:c2:ca:af:28:cf:62:a1:cb:05:98:c7:f1:48: 1e:07:86:f1:b4:20:55:29:7e:93:34:b8:aa:ed:6c:3d:a2:3d: a5:cc:01:31:3a:a6:9a:12:2c:de:27:ba:08:1f:57:15:a3:73: ec:05:92:44:73:47:96:ce:40:6f:ee:c3:83:af:f0:2f:b1:5b: 7a:c7:ef:85:95:de:02:ea:32:4f:6a:73:91:de:5d:fd:b2:ef: 27:b5:81:1b:79:6a:98:10:9e:a1:8a:fd:a5:54:9f:6e:4e:53: 51:65:d2:1d:bb:6f:65:82:fd:2b:2e:26:db:ec:0b:81:fd:9c: 65:f9:10:5f:db:0f:79:40:69:77:c4:71:51:fa:72:27:77:22: d4:90:01:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHzkkMhEbG8jSuvlCiAu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4 ZTJiNWUwHhcNMjUxMjI4MDQwMjI5WhcNMjUxMjI5MDQwMjI5WjAzMTEwLwYDVQQD EyhhMTNmMzkwOTUyYTcwNWZjYTcxZWQzMjBkMDgwOWZlMTUwNzNiZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0em/Y7sBey3JUSMz6lZTISVlwUU 9SeK/HAvrE2diLlLQrgFA8r7CGjcAl3RniWW6TrHlHyyAirdx1fMWNv5poTMhgpB AkaGLnUmMr09Q7yuLaL+zWFlSMRmDKDlBvSyc56aQFnoSt1o5v7LTOcLc4llUXo/ s2wKlkOiqAdbpPUWRIUDKrRSBBCRONwNiQ+DHrslgRQ03x0zJYrlOC8AmereQyK2 bgmiHKNEY+msowUCgZTEZoSx5wYHXC/Saun/BEnBQnrYUUiqV69IkwMtfQrnkRrP lWUh50QvBmWANTAecKVGRAwYYWzicn00gZ1o7q263KlFXrmKbpcmSqs+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE/OQlSpwX8px7TINCAn+FQc7++MB8GA1UdIwQY MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVfGtPuR fko/pADABgwRhe4XHqYMzEfDUh8jAPzv5aM7M0tZ5VEMj6BSg9pIAL5TrIXWNPdk OJrwO0vplvu/pBvJ75IzBcfQkVxjyDHH5RY9ufPRugyGXFSiebzPwpR4yJkFzmUq V/+g9VpV0uRsBqDCyq8oz2KhywWYx/FIHgeG8bQgVSl+kzS4qu1sPaI9pcwBMTqm mhIs3ie6CB9XFaNz7AWSRHNHls5Ab+7Dg6/wL7FbesfvhZXeAuoyT2pzkd5d/bLv J7WBG3lqmBCeoYr9pVSfbk5TUWXSHbtvZYL9Ky4m2+wLgf2cZfkQX9sPeUBpd8Rx UfpyJ3ci1JAB8Q== -----END CERTIFICATE-----Generated at Sun Dec 28 07:30:57 2025 by rpki-client